Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: AUQueC+NzwoSXRGNNazLlT1xr66tgJSljGz6P97LqB0=
Subject key identifier: 54:23:78:4C:99:55:F9:A5:CF:5D:E6:EB:49:38:12:BC:37:69:C2:C2
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019D9886B127FD8CB0B7AF183AFD31DBC311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 079F
Signing time: Thu 16 Apr 2026 23:00:57 +0000
Manifest this update: Thu 16 Apr 2026 23:00:57 +0000
Manifest next update: Fri 17 Apr 2026 23:00:57 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: AYYrMCnZfq1U5axCWCv/ocbHdTmfV1jz61JOJ+gp2DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b1:27:fd:8c:b0:b7:af:18:3a:fd:31:db:c3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Apr 16 23:00:57 2026 GMT
Not After : Apr 17 23:00:57 2026 GMT
Subject: CN=5423784c9955f9a5cf5de6eb493812bc3769c2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:aa:1e:ae:db:08:76:b6:ea:d4:1d:5c:e1:
4e:c8:fe:27:84:66:55:8f:87:33:0f:23:2d:b4:25:
23:5b:63:a4:be:ea:c7:a0:a3:d1:21:28:55:a1:41:
92:91:10:87:3e:98:c6:7d:08:76:38:10:43:bd:fb:
94:f1:a1:1c:40:a6:a7:ef:be:8a:9c:6b:df:64:9f:
c1:06:a8:32:a1:04:ff:d5:56:66:ed:61:9e:21:b6:
1c:d8:b6:69:32:c3:00:55:fe:67:f9:a2:f3:29:87:
14:a3:ad:d5:87:e2:eb:df:0a:7a:5d:02:e3:e7:df:
19:1b:9a:df:87:c0:05:ff:95:94:26:db:30:3c:33:
e8:01:e1:97:4e:46:8b:aa:9e:30:3f:d1:61:b7:0d:
ee:ea:ff:0e:1c:53:63:5c:1e:13:1b:94:b8:d1:8a:
1e:f6:12:f5:88:3c:9a:1e:40:85:d2:5d:a1:96:b3:
da:52:ef:ba:42:74:5b:e5:ab:9f:3f:72:88:f1:74:
a8:9e:2c:ac:39:c8:9d:82:f6:27:4b:fd:70:ce:80:
f9:9f:64:81:36:08:5c:8e:96:54:69:1f:1c:25:56:
8d:19:ba:aa:a8:23:91:cd:08:8d:6b:ed:38:92:89:
f6:7c:b7:df:19:8f:0e:d2:54:92:ad:b1:8f:65:49:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:78:4C:99:55:F9:A5:CF:5D:E6:EB:49:38:12:BC:37:69:C2:C2
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0d:0d:c0:7a:bf:b5:6c:b1:95:c1:ee:15:e8:96:0c:0e:82:
b1:a1:5e:30:33:e5:59:18:25:aa:50:2c:61:ce:69:b4:36:90:
d8:c4:6c:81:e0:b0:58:96:9d:93:61:29:42:83:f3:bc:f1:5f:
c6:ae:37:e5:52:e3:31:15:ba:89:61:11:6a:b2:3d:52:19:64:
73:03:32:3c:7f:68:83:74:d2:19:01:bc:ac:0e:cc:3c:db:75:
b4:31:a8:99:8b:7d:7d:27:3d:ea:e6:0b:45:20:6b:ec:67:75:
17:01:fe:79:87:d0:99:c2:b7:4c:e7:72:ca:82:3f:ea:5d:0d:
32:d6:ee:92:df:af:8a:98:43:e6:24:3d:9d:31:c8:60:dd:5a:
2e:e9:b7:00:ec:13:c6:49:75:04:1a:89:16:46:85:09:7c:0d:
cf:20:35:be:28:2d:e0:89:e1:5d:a6:7d:71:17:e3:15:a0:2b:
ff:95:28:22:eb:04:5f:fb:5f:7e:dd:1e:96:b8:a6:e5:ed:46:
ea:38:df:77:32:b5:af:df:33:31:fe:62:dd:30:b2:8b:8e:ee:
bc:25:33:a6:be:b0:03:41:23:8c:03:94:4f:92:83:d5:95:28:
41:5e:2d:ce:cd:3e:88:f1:47:c4:fc:79:ab:35:8b:44:51:2d:
43:b3:95:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:16 2026 by rpki-client